Add a (deactivated by default) filter for skipping unreadable post errors
Moar wheels
Set HTTPOnly on the session cookie
Use redis for caching and for reading sessions