Use HTML 5 doctype!
Using a session secret.

Which well, isn't that secret after all since we are going to publish it to github in a second.