refactor(cookie): remove cookie-signature dependency and use the native crypto module to sign cookie

[bhavya3024]

cookie-signature dependency is not required since it itself uses the crypto module to sign cookies itself.
You can check here: https://github.com/tj/node-cookie-signature/blob/master/index.js

[wesleytodd]

My main concern with this is if the ecosystem of middleware is using cookie-signature to sign their own cookies that can then be read by express, this means we can no longer rely on it all working the same as we update in the future. I am going to request changes for now just to ensure we address that before merging.