+ content-type check
relative login/logout urls
+ better BZ support