COLDBOX-216 reworked how debug mode is enabled

COLDBOX-216 reworked how debug mode is enabled so cookie value cannot be guessed even if the cookie name is known.