switch to encrypted_cookie
v0.3.0