remove session and encrypt cookie data