First version of user cookie id

an user cookie id is always available
in the flask g variable.

cookies are bound to the user if logged in
otherwise they are random unique strings

Some tests still missing