cookie-expire-time

- document new cookie feature and configuration setting

- add configuration setting

- small refactoring in cookie handling
  - first manage cookie-expire-time
  - and next, cookie-timeout

- convert cookie to session-cookie if cookie-expire-time=0
- enforce expire-time if cookie-expire-time>0