Logging + global exception handler + small changes in login
CSRF protection