replaced All
$_SESSION['user']
$_SESSION[config("site.url")]['user']
to prevent login Bug on multiple Installations
logout bug fix
logout affects only the current installation
session_destroy not useful,
because every request session_start is called
security hotfix
deleting remotely any file on the server.
Merge pull request #1 from Kanti/hotfix

security hotfix
added CSRF Token
Merge pull request #57 from Kanti/csrf

Various bugs fixes by @Kanti.