remove custom GUID implementation
secure randomness on the server
minor fix in cryptoRandom
remove word password from comments to please fortify
fix some randoms for  fortify
don't ever set password to null or blank for Fortify audit
workding
CSRF protection. Needs work
Merge remote-tracking branch 'origin/csrf' into glTF-clone