Use debug level in the dev server. Fix the datastore paths. XSRF settings. Fix the session name.
Use POST for AJAX handlers.