Allow/Disallow Cookies Function

[Stephan Doerfel]

For logged-out users (logged-in users have already aggreed to the use of cookies when they registered) we need an "Allow cookies" feature. Displayed is a question whether or not the user allows to use cookies. Any cookies (e.g. the session cookie) are then only generated when the user accepts cookies. Furthermore we store the information that the user has agreed to using cookies in a cookie so that we can check for that cookie before we ask the same (logged-out) user again.

Ensure that this behavior is compliant with the German laws for cookies.

[Daniel Zoller]

The tricky part of this task is to disable the tomcat session id. Maybe it is not possible, it depends on how the session generation is implemented by the tomcat developer team.