Spring cleaning

The only change worth mentioning is that options are cloned, to avoid all those `|| default-thing`s. It also fixes a minor bug wherein a `secure: false` passed as an option can’t override a default of `true`.

… well, okay. I’ll also mention that it fixes the special characters on the right of [the test page](http://js-coder.github.com/cookie.js/tests/index.html). :)