Lock OS threads so the uid doesn't change
Require that the schema match the one in the cfg file if specified
Consume all incoming POST data even on an auth failure
Add code to debug connection traffic - currently not pulled in
Generate a random cookie key at startup rather than using a stored one
Rework hooks so they are now run before connecting to the backend when the user doesn't present a cookie
Convert the incoming url early as proxies change it to the destination