Fixed CBC encryption - added IV to cookie