Sign and verify cookies

[Dragomirc]

In your handlers, you are not signing and verifying your cookies.
After the user logs in or sings up you need to sing and send them the cookie.
Then the you'll be verifying the cookie when someone goes directly to a page other than login page