Added filter that sets app headers. Temporarily set filters on FORWARD,
fixed some inconsistencies in admin page. Set session tracking on cookie
only and that cookie on http only.