set hashid for cookie

[Aleyasen]

The cookie mentioned below needs to have a token/nonce/whatever in it to make it unforgeable and unreplayable (you should be able to use pre-existing code to make this happen. Don't write this code yourself. You don't want to have to think about the kinds of subtle attacks that attackers love to dream up.)