Use pickle for session serialization.

With pickle, passing datetime objects over sessions is possible.
This is not a security risk while using database-backed sessions.
The only data users can enter to sessions are openid/saml requests.
Custom CSRF error page.
Missing error view
Automatically add user details to context. Sessions on a separate page.