moved session user id to signed cookie
Merge pull request #136 from assureit/sined_cookie

moved session user id to signed cookie