Generate stronger XSRF tokens. Fix a problem with the path of the session & xsrf protection cookies.
Document better the router.