reworked cookies

GS_ADMIN_USERNAME legacy support
cookie name is no longer hashed, removed version
user is now stored in cookie value along with expiration
getsimple_cookie userid|expirationunixtime|hmac