changed session over to benadida's node-cookie-session with encryption and signing of the cookie, closes #416, closes #832
