Use signed cookies for sudo token

Fixes #1