Use 'httponly' for session cookie, add support for 'secure' session cookie; Fix extractkeyfromcookie() to not cough on invalid cookies; Tell the Tequila server our id and version