switch to standard cherrypy session expiration mechanism
always set session data, to prevent new session ID for every request
switch to persistent file storage of session data
improve client-side session ID security by setting httponly
issue 24: switching MathJax CDN URL to https
issue 31: show replies in order most recent last