http profile action return a json object
store cookie and csrf data in settings

We implement a primitive cookie manager because we want to
support android 2.2 and above.

Android's cookie manager supports version >= 2.3 (API 9).

TODO: maybe move this in a separate class with separate settings name