errorClass: Further protect against nil errorMap.  Fixes #285
set Secure flag on cookies if running with HTTPS
Merge pull request #295 from dajohi/master

set Secure flag on cookies if running with HTTPS
add cookie.httponly bool option.
New bool option "cookie.secure" to set whether cookies should set the secure flag.
make cookie.httponly and cookie.secure options apply to the flash
cookie as well.
Merge pull request #297 from dajohi/master

add cookie.httponly bool option.
add sample project with persona authentication
Merge pull request #288 from marconi/master

add sample project with persona authentication
Add some docs to session.go
Allow session only expiration

Now it's possible to set session.expires=0 in config and the session will expire when the browser is closed.
Fix compilation

And small refactoring
Too much copy-n-paste
Session variables are now copied to RenderArgs["session"]
Fix comments to adhere go standard better
Fix suggestions from Rob
Fix sessionTimeoutExpiredOrMissing, rearrange else ifs
Remove extra space
Fix Websockets for IE

IE header "Upgrade: Websocket" 
Chrome/Firefox header: "Upgrade: websocket"
Sleep between tests to give more time to release port.