refactor and organise current_user better
cookie recovery cause we have been messing with it.
correct breakage
don't set permanent cookie, kill session if it conflicts
comment out missing test