pvl.login.server: separate redirect/refresh'd step for cert download to display html first; fix set-cookie quoting for werkzeug 0.9

syntax: regexp

# tempfiles
\.pyc$
\.sw[op]$

# generated files
^dist/
^MANIFEST$
^log
^ssl/

# testing
^(tmp|test|var|opt)/