Encrypt access token in db and encrypt username in persistent cookie.

Let login first try to login user remembered in cookie as long as the access
token is still valid and accepted by oauth provider. Then, if cookie does
not exist or access token no longer valid go through the fill oauth 3-legged
process.