Store login token instead of user id in cookie