Add CSRF protections
Reduce session time to 2 hours