Tweak session mappers
Use JAR for setting CSRF cookie parameters
Update API documentation