Now the session information is stored in a signed cookie.