Go coding style says that acronyms should be all lower or all upper. Fix Url to URL.
* New SessionState to consolidate email, access token and refresh token * split ServeHttp into individual methods * log on session renewal * log on access token refresh * refactor cookie encription/decription and session state serialization
validate-url
