Fixed potential infinite loop in safe_html with recursvie structures
Upgraded auth to not break with subdomains. Changed the cookie name to include the hostname.