migrate to Rails 4.0
use encrypted cookies on new installations