Add Crypto module
Add servlet for session handling
Use proper status code for unauthorized access
Parameterize cookie creation.
Add authentication to OHPServlet