finalized removal of session superglobals (yep, global $session isn't nice either, but let's do one step at a time)
playing around with mustache templates