A session token validation is done only if request contains crowd.token_key cookie

Signed-off-by: Pasi Savanainen <pasi.savanainen@reaktor.fi>
Fixes typo in return value checking

Signed-off-by: Pasi Savanainen <pasi.savanainen@reaktor.fi>
Takes NGX defined error values in use.

Signed-off-by: Pasi Savanainen <pasi.savanainen@reaktor.fi>
Fixes Cookie generation. Note! domain is still missing.

Signed-off-by: Pasi Savanainen <pasi.savanainen@reaktor.fi>