Ensure cookie jar is created with 600 perms.
Merge remote-tracking branch 'upstream/v0.2dev' into v0.2dev