www form encode cookie session store value

This is to match rails. In Rails land, it's rack that does this for
all cookies.