Use dwCoXsrf as XSRF token, not the SID
Use dwCoXsrf as XSRF token, not the SID

The SID should not be included in the HTML, because someone might
download the page and e.g. email it to someone. Then the SID should not
be included.

debiki/debiki-server-old,debiki/debiki-server-old,debiki/debiki-server-old,debiki/debiki-server-old