Give &CookieJar instead of &mut CookieJar
Put session in a signed cookie