Remove session and use an simple user cookie for username and role