Cookie encryption : send the expire time rather than the init. vector

This is a security commit : As the IV depends of crypting algorythm, it
musn’t be sent.