added signup/signin/signout via encrypted cookies