Use signed cookies instead of the session.

Some environments have the session not always available, therefore use signed cookies1!11! :)