Update validator test cases
Monkey-patched repoze.who for cookies' secure parameter
Chose a bit better xpath