Fixed to handler cookies from previous version correctly. Add back in inf max_age for session cookie when Remember Me is checked so it passes the expiration test.
Add require_login to admin filter. This was exposed as an issue when someone accidentally granted admin to the public. No administrator action ever needs to be performed when not logged in.
Fix remember me checkbox. Conditionally set login cookie discard_p setting based on value of the remember me checkbox when creating or renewing the login cookie.
Add bind var support. Note incomplete hack to handle to_timestamp. Since when we construct the query we don't have access to the attribute/form datatypes. Also return new object_id in new_from_form procedure.
