Fix feather.auth.user. But wait, there's more.  No more session id chopp...

...ing.  Instead we parse the signed cookies so we're consistent.