handle some failures in sudo

- handle failure to set CWD with less cryptic error than "preexec_fn failed"
- make Spawner.notebook_dir configurable
- fix an inaccurate invalid cookie token message