Implement server-side login tokens.
Force regenerate token that match user ID.

Users that were logged in with the old style cookie
using their user ID were unable to re-login.
Merge pull request #40 from perfectsense/feature/login-tokens

Implement server-side login tokens.