Encrypted session storage

Session data held in the browser is now encrypted at rest, and we fixed a Safari-specific issue that could drop the session on login.