added commons-codec to have a url safe base64 encoding for cookies