Commented out session init, removed content security