wip: initial cookie session port

[yannick]

using sha256 and json marshalling as default

[yannick]

i actually dislike the idea to store all info on the client side since we need to use redis anyways.
thus it should just generate short uuid in the cookie and get the data from redis.