Add object/base64 conversion
Add cookie based session
Add AuthController, but still fake
Rename Session with CookieBaker

- Eliminate object serialization. Support only string value
Add CookieBaker secret key option
Add session_storage

- Support object value on Storage