Login returns a valid login extracted from the given cookie and verified using the given secret key. If verification fails or the cookie expired, the function returns an empty string.
(cookie string, secret []byte)
Source from the content-addressed store, hash-verified