Added initial session component
Fixed redirect response internals
Router can now return a response object
Removed useless template
First security check