Fix sent Set-Cookie header twice
Make login session as session cookie
Use static secret to keep session when the server will be restarted
Merge pull request #12 from everyleaf-internal/fix_cookie

Fix cookie