Compress the cookie data before encryption

Saves about 200 bytes
Refactored out TokenCookie

Now just store one single cookie.
Added test for the Heroku server

The test fails due to failed signature verifications for the JWT being
sent by Heroku.
Renames and Javadoc

This was made to make things follow the IETF standards.