Cookie notice

TODO TODO: Cookie notice text to be supplied and approved by the company before launch. As shipped, the site sets only essential cookies (Django's CSRF token, and a session cookie in the admin); there is no analytics or third-party tracking.