SessionUser now serializes and deserializes to cookie as encrypted and encoded