Added httponly parameter.
Added github link.
http_only --> httponly typo.
Adds a per-user salt into the ticket generation.

Based on step03, adding a salt, which is re-generated on
each password change, therefore effectively logging the user
out from other browsers when the password has changed.