Session: Changed sendCookie and  to protected to allow extension/overloading