Merge pull request #1 from mattpass/master

update
Using a custom session_start_safe

This fixes path issues, where the session directory ends up not writeable.
Re-adding the session_cookie_params
Using reworked version from @mattpass
Merge pull request #511 from AVGP/507-csrf-issue

Flexible Session handling