v0.0.9

 - Optionally allow signed cookies escape token injected into html (pull #14)