Secure session enabled. CSRF + Argon2 password hashing active.