Added session timeout
Fixes the security bypass noted in issue #419
The manager should now work on the URL with no user defined.  It popup a login window.
Fixed a bug with user logging in on the URL.
Fixed a regression whereas ww2 users could not auto log into ww3.
Fixed another edge case of security with the manager and changed the name of a method from authenticate (which this never did) to buildSession (which it actually does).
When running the course manager, the session key must be on the URL or a relogin is required.  Before if a user was logged in from anywhere no authentication was needed.
Made sure that the dancer session key is the same as the ww2 session key.
All session information is stored via ww2 cookies now.
Fixed a regression where any route that called checkPermissions wouldn't work.
cleared all cookies out upon logout from ww3.  This prevented going back in a browser and still being logged out.
Attempt to keep the domains in cookies for ww2 and ww3 equivalent.
Made sure that the domain was set for removing cookies also.
Another attempt at getting the cookie and session data right.
Allows a user to login via the ww3 interface by going to webwork3/courseName/manager
Make sure that the cookie expires.
Fixed a silly bug.
Jquery-ui themes moved.
Fixed another security edge case.
Merge pull request #423 from pstaabp/ww3-feature/security-fix

Ww3 feature/security fix