Added CSRF, client cookie sessions, error reporting.