Making attribute rendering more robust for different JSTL implementations.
Adding favicon as an unprotected page.
Renaming local property
Fixing local logout - form wasn't including "local=true" parameter.
Adding lazy initialization to the HttpSessionStorage. Improving logging. Making it compatible with application servers which require call to session.setAttribute to make it replicate. Improving documentation.