Investigate rails 4 style cookie signing

[Corey Donohoe]

Now that we're verifying session cookies in #43 see if it's worth doing rails 4 style cookie signing.

https://cowbell-labs.com/2013-04-10-decrypt-rails-4-session.html