Create signed session cookie with user id on login
Log use of temp. auth/encryption keys for session