added CSRF token capability
added loop function to generate iterator for 'range' statement
added special header value to identify the request.
session should be stored only on modified.