Fix the php issues in the latest updates, and move the CSRF tokens into the UI layer.
Add page support to the client code.