use X509 cert to encrypt cookie for further moving to load balancer