Use play session variables to maintain secret.

Removed cookies, use play session variables.
Various tweaks, copy changes, clean ups.