minor change session cookie config
fix ivy trouble with javax.servlet due to .orbit extension

https://jira.codehaus.org/browse/JETTY-1493
Merge remote-tracking branch 'origin/jetty-8'
Instead of .orbit dependency: use direct download