Security enhancements: 'user' session cookie no longer contains the username; session cookie is randomised so less 'guessable'; session cookie has 'Secure' flag set (if https); session cookie has 'HTTPOnly' flag set to prevent probing via XSS


git-svn-id: http://svn.montala.net/svn/resourcespace@4445 c08608d7-6e46-0410-86ca-f2a6f1370df5