- Resolves VUFIND-1223.

- Otherwise server-side functionality such as emptying the cart won’t work since it will push the cookie using a path while the JS functionality uses a path-less cookie.

- Verify that any existing session path is correct
- Avoid trying to set an empty path for the session cookie.

- Fixes VUFIND-1214.

- Fixed captcha check in password recovery to not lose track of the auth method and user to recover if captcha check fails.

* Refactoring to shorten newPasswordAction().

- Use the tag_id instead of a hard-coded 1 as the is_me value; this is simpler and still works because all the template cares about is checking for non-null values.
- This works around a problem in some versions of MySQL where the hard-coded 1 was causing invalid results to be returned.

Fixed an issue where the login dialog breaks with ChoiceAuth if CSRF check fails for any reason (like session timeout).

Encode the username, so spaces in the username don't throw an error.

- Use a timestamped init function name in Piwik tracking and load the tracking js only once. Fixes an error in lightbox and record tab tracking (Piwik logs to console: "A siteId must be given to add a new tracker").

Per Mailing list recommendations adding in support for checking if the item has a location set, even if the authorized value isn't set.

- Change the static date of 2099, to the date the item was lost,
as the due date.

- Thanks to Ere Maijala.

- Thanks to Ere Maijala and Leila Gonzales.

- Load Google library once per page, instead of once per Captcha
- Allows proper functioning of multiple embedded ReCaptchas in a single set of search results

* removed strip_slashes on json post data as it would invalidate json string if it contains chars that need to be escaped (#801)