Added header control to app responses.
Modified logIn to return a random session ID.