fixed session, cookies and encryption after user changes password