.htaccess

- removed file extensions
- included .htaccess to prevent access to some of the directories
- new $_SESSION['user'] - tells the server what user is logged in
- HTML DOM