This release contains improvements around application security. For instance session cookies
and FlaskLogin's remember me cookies are now set to be secure and http-only by default in production environments.
Additionally, flask applications are now CSRF-protected out of the box so you don;t have to remember to enable this feature.