fixed the timeout in the cookieless sessions
implementing a max count for cookieless sessions
making the url prefix configurable for cookieless sessions
moved where we insert the session meta for cookieless sessions
added option to control creation of cookieless sessions
expanded the automatic tests
adding a test for the session timeout and fixing a bug it revealed
implemented a test for the session max count