Responder cookie id swapped for base64 random string

Users were able to impersonate other responders by editing their
cookies. This fixes that security hole.