Added CSRF protection with token functionality, created Token and Session classes.