master
fix(auth): unify remember-me cookies into single cookie
fix
fix(auth): use random IV for encryption and validate roles in config