startup() for all core objects. all session cookie issues are now fixed, and $_GET and friends are now unset again properly during startup. cleaned up factory config handler a lot. session cookie lifetime can now be in strtotime format, too (refs #423). closes #433