Move cookievalidationkey attribute from common to frontend and backend
Fix the user model behaviour