Added constants for W3C date format
Send secure cookies if served via HTTPS and always restrict to HttpOnly
Started overhauling the form elements