Update dependencies.
Clean up form-session a bit.
Require X-Forwarded-Protocol to be set.