added beaker session factory and xsrf handling

* added beaker session factory and xsrf handling
* also updated .gitignore file