Base64 can contain / characters and so shouldn't be written to disk as is. The _ character is not part of b64 so we use that instead.
Merge pull request #9 from darobin/fix-disk-session-storage

Base64 can contain / characters