Security Hardening

The perimeter is sealed. Auth and sessions hardened; disclosure channel established.