FEATURE: single login support for ESP
CLEANUP
FIX: appweb -1
FIX: esp-angular stale XSRF token retries.