Add session support
Add CSRF support
Add grant and login flows
Test registering API REST resources