Change the structure of the cookie, and add the username to it

[lstep]

Allows checks to be made. The username woudl be in cleartext, but included in the calculation of the hash.