Updating CHANGELOG, fixing cookie encryption