Session Tuning

[publickeating]

Switched branches. Here is the original message:

I’ve been using cookie-sessions for a while and thought I’d push back the additions I made. I tried to make it into nice clean commits, but had to make a few corrections along the way. The key changes are that you can now set the 'domain' and make the cookie 'secure' as well as that 'max-age' will be sent if useMaxAge is true (default). Just to be complete, I also made it so that you can also selectively turn off setting 'expires' and 'HttpOnly' with useExpires:false and useHttpOnly: false, but the defaults are that they’re true so it shouldn’t change any existing uses of cookie-sessions.