Session store + authentication mechanism

- Used "secure" cookies to store session
- Works like a charm, now we can go on with the real apps