Removed spurious requirement on test
Refactored and tested the cross-site session protection
Updated messages.pot with the latest lines
Updated changelog