fixes to session management issues

login challenge page returns user to referer page on site
login via form, verification / challenge page, cookie simplified on frontController
secure pages not cacheable, prevents browser back visit to secure pages
domain name in cookies set via getServerName

Signed-off-by: celynch <celynch@gmail.com>