Added max_cookie_age parameter (Qwait)
moved get_came_from function to libapex.py (Qwait)
added uselist=False to last_login (Qwait)
unicode ip address to avoid sqlalchemy issue on bound param (Qwait)
updated readme, fixed forbidden view (Qwait)
added log message with CSRF token mismatch