Rebrand session_id as nonce.
Use the nut as the session id instead of the nonce.
Change session_id to just id in the ssi directive.
Fix enforce option.
Small start on response messages.
Reorginize the code a bit.
Now validates clientarg + serverurl instead of just the url.