Implement Externalizable for serializable classes

As a performance improvement any instance that can be remoted or serialized, we should implement Externalizable for better performance. This also has a nice benefit for web environments - the rememberMe cookie value should be significantly smaller with a custom Externalizable implementation.