add encrypted cookie and session