Remove cache
Rework index.php
Use CsrfGuard, make logout CSRF-safe