added database and session libraries to autoload
some changes in configs

added encryption key for session;
turned global xss filtering on;
turned csrf protection;
changed log date format