refactor Secure Cookie API

* change Secure Cookie to more easily modify stored data
* implement new API on service to pass username between pages