Actually link to reviews in search result page

Fixes regression introduced in 5ec60e30 "Support linking to review
searches", which accidentally sets the href attribute of all anchor
elements in the dialog to the URL of the search.
Set Max-Age directive on cookies again

Fixes regression introduced in 8e83ce2d "Add framework for authenticating
users via external systems", which moved the code that adds Set-Cookie
response headers from src/operation/__init__.py to src/request.py, and
reverted 4c9a1627 "Set Max-Age=<1 year> on all cookies" in the process.