Added UT.
Improved ChallengeToken handling and tests.
Added Session ID handling to forms.
Added output filter handling and tests.
Added pre output filter handling.
Added handling of SID in URLs when cookies are disabled.