Updated to use a hashed cookie so the cookie could not be editted to bypass 2nd factor.