Pr/3098

I've fixed up https://github.com/silverstripe/silverstripe-framework/pull/3098, rebased it, squashed the commits, fixed the test cases, and made a few API suggestions.
I think it should be injected so people subclassing/replacing CookieJar get the benefit of seeing how their replacement works across all tests.