Set encryption key on signon, destroy session on signout