Add sessions, csrf, clean up in prep for login
pffffff