Fix confirm_sesskey(), backpack AJAX message, backpack timeout