requirements update for pbkdf2 module
base handler set session id using secure cookie