chore(masquerade): use encryped signed cookie