fix nonce issue from refactor
allow wildcard domain ssl certs since some providers do that (bluehost)
don't resquish zepto. it breaks
single place for unique id generation
expiremental early close session for ajax requests
add early close session module to core, set negative expire header for
html
style validation fixes
try out the early session close logic and remove some unneeded mods
early session close testing
make sure ini settings are secure/optimal
keep session ids under 250 bytes
make sure we set a long past expire date for browser caching on dynamic
pages
make session cookies more secure, and clean them up properly