Fixed Issue with Encrypted Cookies

There was a minor issue here where the cookies are trying to be hmac_hash checked even when they are encrypted. The _set_cookie function only applies the hmac_hash when the cookies are not to be encrypted according to the config file. It looks like the hmac_hash is a backup to the standard encrypt but its being used where it shouldnt which would cause all sessions to be immediately logged out.