Lots of additions to the Android code. Also, temporarily disabling the csrf() security until I can restore the H2 database console _and_ retain the csrf() stuff.