set session cookie encryption to TRUE