Adds "engine: append headers" event listener
Fixes a bug in 'adminAuth' filter
Fixes user seeds to meet new User validation rules
Fixes and improves csrf protection