Added CORS support, session timeouts, and some proxy work