Make i possible to invalidate cookie logins. Separate hash keys fro sessions, cookies and passwords.