Added encryption and general session call

session (user and general) now encryrted before storing in cookie.
Decrypted in making new calls afterwards.  Also created general function
to establish session token.