A lot of changes, bugfixes, some cleanup. Adding substate for GUB where I pass non-DURING and then if user is logged-in then test same GUB cookieset by blocking non-DURING. This is just like LLB cookiesets two states