set a 1 hour expiration on the http session
support for selective (based on url accessed) expiration of cookies
added a comment re: Katello::UrlConstrainedCookieStore#call origins
added comment in session_store initializer pointing to environment-specific initializers instead.
removed a trailing space
moved tests to a more visible spot in the test suite
fixes based on comments in the PR
fixed failing test
updated to work with Rails > 3.2
session timeout is now working under Rails 3.0.x
fixed test/lib/url_constrained_cookie_store_test.rb that was failing on rails 3.2
removed trailing spaces
Merge pull request #1731 from witlessbird/session-timeout

enabled http session expiration in production environment. Notifications do not have affect on session expiration.