Adds MAC for securely passing contexts through client.

* Replaces form with more compact span markup.
* No more JS/PHP globals.