Change TestHelper to only create fake shibboleth session

Move all authentication cookie creation to SessionServlet
Change shibboleth cookie value separator to =