fixed the problem with drop_ip and swabber conflict of interest, cookie secret is hash of key from config
Merge branch 'f--stateful-challenger' into staging, second try after updating local f--stateful-challenger