switch on the ssl setting
added secret cookie
destroy secret cookie
changed the current user