Added doc for testing on command line with curl, and set cookie configs for weblogic, jetty to disable url rewriting of session id and set to httponly