Added "framework.mode" configuration setting

This is to allow extensions to be selective in what they register.
Session filter is now HTTP only