FIX: ESP legacy-mvc too many arguments in default.esp for renderFlash()

Issue: https://github.com/embedthis/appweb-4/issues/251
Adjust unit tests for bad URIs
FIX: XSRF token must be reset if session is recreated.
FEATURE: Add httpHideRoute instead of “unused” as name.

This hides a route from route log tables. The route is still active.
This is used for inheritance routes.
REFACTOR: Rename config.json “sendJson” to “json” and “xsrfToken” to “xsrf”.

Old names still supported, but deprecated.