After several ver productive hours, almost a whole hour down on a CSRF bug. Fixed now.