cookies are encrypted starting Rails 4