[security] Stop printing generated server-secret
[security] Keep all enthropy bits of the generated secret
[security] Make sure to explain cookies need to be sent via HTTPS
and with the PersonaAuthCookieSecure option set to ON. In docs and
sample config files
[security] replace uses of strcmp() with strncmp()