Seperation of controllers + cookie crypting