Update copyright
Some documentation
Add App singleton
CSRF check