first attack at encrypting session data on the fly.
put the basic mechanics in place, but there is an issue with the save method and unit tests are failing