If the secret key for an app changes, the user session can become corrupted.

Fixes #41

I think, it's a more elegant way than @dsully proposed.
The test is included :)