s/script_url/base_url/g
fix filename in download
use Mojolicious session module instead of homebrew session module. Remove old modules and update prereq list in dist.ini
add config options for secret and reverse proxy