set a 1 hour expiration on the http session
support for selective (based on url accessed) expiration of cookies
added a comment re: Katello::UrlConstrainedCookieStore#call origins
added comment in session_store initializer pointing to environment-specific initializers instead.
removed a trailing space
moved tests to a more visible spot in the test suite
fixes based on comments in the PR
fixed failing test
updated to work with Rails > 3.2
session timeout is now working under Rails 3.0.x
fixed test/lib/url_constrained_cookie_store_test.rb that was failing on rails 3.2
fixed a ActiveRecord::ReadOnlyRecord error occuring during the migration when rails 3.2 is used and there's existing data in the db.
removed trailing spaces
Merge pull request #1731 from witlessbird/session-timeout

enabled http session expiration in production environment. Notifications do not have affect on session expiration.
Merge pull request #1838 from witlessbird/fix-readonlyrecord-exception

fixed a ActiveRecord::ReadOnlyRecord error occuring during the migration