encode email cipher with hex to avoid null string session value caused panic