Global cookie jar disabled by default

As per #571, it's dangerous for the global cookie jar to be on by default. This commit disables that behaviour. To use the global cookie jar, use jar:true. 

I think I've got this right, but I'd appreciate a code review. 

Thanks!