Fixed cookies, split encryption from apps, removed need for token interface, split out logoff