Add CSRF protection
Fix potential XSS in email
Add session regeneration after login
Merge pull request #84 from kenjis/fix

Security Improvements