Add object/base64 conversion
Add cookie based session
Add AuthController, but still fake
Rename Session with CookieBaker

- Eliminate object serialization. Support only string value
Add CookieBaker secret key option
Add session_storage

- Support object value on Storage
Use cookie for login session
Add profile/edit
Format illegal sources
Rename user with account