HSession

I would like to add a secondary more XSS and CSRF resistant session token to user requests to help tighten security.