Added cookie on sign in for both remembered and not.
Return a 401 when not authorized for issues list. Still need to add user to session somehow on sign in.