Use encrypted cookies for sessions (bug 871850)