Make identity['userdata'] actually usable

Changed identity['userdata'] that is passed to WSGI app into a dict. User can modify it - provided they keep it compatible with urllib.urlencode() - and it will be automatically serialized, saved into the cookie and deserialized in subsequent requests.
As it was broken before, backward compatibility should not be a concern.

If this solution is acceptable, I'll be glad to update documentation and tests.