Install and configure various bundles, security fixes.

Similar to what was installed and configured for RA and SS:

 * Install and configure MopaBootstrapBundle.
 * Install and configure JMSTranslationBundle.
 * Nelmio CSP report URI simplification, as it is public anyway.
 * Secure, HTTP-only session cookies.