Make CookieSecurityService available in LoginHandler, rename dycrypt -> decrypt