Added session pane and remove csrf_token hiding