CSRF protection implemented, NullSession class created
initialized work on UrlHelpers