Use base16 encoding for message digest to match rails
www form encode cookie session store value

This is to match rails. In Rails land, it's rack that does this for
all cookies.