[#80392048] bug (maintenance) consistent serialization between cookie and token

Change serialization with cookie maintenance to be consistent with token.

Previous req.user with cookie

req.user  = { username: // name }, etc

was missing isAuthenticated, data, metatag tag that token had.

New:

req.user =
{
  data: { user object},
  isAuthenticated: true/false,
  meta: {} // currently empty
}