Pr/3098

I've fixed up https://github.com/silverstripe/silverstripe-framework/pull/3098, rebased it, squashed the commits, fixed the test cases, and made a few API suggestions.
Wow, places still using `$_COOKIE` directly? Nice bit of refactoring there!