upgrade flutil (flu_list_to_sm())
make sure cookie format is right (name=)
upgrade flutil (flu64_encode_for_url())
use flu64_encode_for_url() when generating sid
upgrade bocla client
scaffold session auth webflow spec