Pulled out user cookie encoding so it can be used on the server in UberFire's form-based login process
Make todolist user an errai security User.