Updates to SessionCSRF to prevent "this request appears to be forged" message from appearing when it doesn't need to. Also updated Session and SessionCSRF to use the new namespacing features of Session.