Bug fixes, security improvements.
* Added token-based session verification.  If a different user agent is detected, the session dies.
* Fixed bug in TinyMVC class that caused requests with query strings to fatally error.
* Fixed bug in TinyTemplate class that would render an empty string when getBaseUrl(''); was called.