respect load balancer cookies

[sammefford]

JerseyServices is currently only resending HostId cookies but should respect other session cookies for the duration of the transaction. This will allow us to respect load balancer session affinity cookies so requests for the same transaction get automatically routed to the same host by the load balancer configured to use session affinity cookies.

[sammefford]

We used to support all session cookies but cut back to just the HostId cookie for two reasons:

1. session lifecycle was undefined so cookies were shared promiscuously through the HTTP connection pool
2. we started talking to the /v1/eval endpoint which sent back transaction-related cookies which caused havoc with (1) above

I have not found any standard REST definition for the lifespan of a session cookie. However, I'm thinking we can allow back in all session cookies (so we will respect any load balancer session cookies) as long as we define the lifespan of a cookie "session" to be the lifespan of a multi-statement transaction.

[kkanthet]

As discussed , assigning back to you while we decide on the RFE 3557