/user/whoami will now work with HTTP GETs.
Removed the expiration date for the cookie.

The cookie will now expire when the browser is closed. It will still expire on the sever and will now expire after only 5 minutes of inactivity.

Closes #512
Increased the authentication timeout to 15 minutes.

References #512
Fixed a bug regarding CSV output.

This is the same CSV bug that has been fixed before. It should now correctly quote CSV output and escape existing quotes.

Closes #516
Closes #514 - there was latent and buggy CORS header management which is now all taken care of by our third-party CORS filter.