the Valentine's Day is over (if you want it)
[csrf-token-should-not-be-session-id] added "case of BREACH attack" section and added many changes of document structure