[PROPOSAL] Include the User-Agent alongside the IP address

[fancsali]

For an additional layer of security the cookie hash could include the User-Agent, so to have a bit more confidence, it's the same browser using the cookie, that has been authenticated in the first place.