CSRF protection for OAuth2
Serve logo from server
Built-in web delegation