more CI configs: database-sessions-load url helper-enable XSS/CSRF protection
adding assets: CSS/fonts/js