fixed bug:
Delete-links for sessions and link have been GET requests.
In consequence bots were able to delete sessions and links by accident.
Replaced delete-Links by form links using POST requests