errorClass: Further protect against nil errorMap.  Fixes #285
set Secure flag on cookies if running with HTTPS
add cookie.httponly bool option.
New bool option "cookie.secure" to set whether cookies should set the secure flag.
make cookie.httponly and cookie.secure options apply to the flash
cookie as well.
add sample project with persona authentication
Fix Websockets for IE

IE header "Upgrade: Websocket"
Chrome/Firefox header: "Upgrade: websocket"
Sleep between tests to give more time to release port.
Allow session only expiration

Now it's possible to set session.expires=0 in config and the session will expire when the browser is closed.
Fix compilation

And small refactoring
Too much copy-n-paste
Fix suggestions from Rob
Fix sessionTimeoutExpiredOrMissing, rearrange else ifs
Remove extra space
Session variables are now copied to RenderArgs["session"]
fix typo of user
Return false to avoid adding "#" to the URL.
Add some docs to session.go
Fix comments to adhere go standard better
Using official goauth2 library.