Account Manager 4 and Core Web were updated.
Account Manager 4
Account Manager 4 was updated to include spool and ticket factories, as well as degraded pagination for non-rich lists to facilitate better robot discovery.
Core Web
Core Web uses the spool and ticket factories to provide basic protection against cross-site request forgery (CSRF) requests.
The implementation is included in the SecurityToken control.
Static content pages that use the session gizmo will automatically register for the ticket.
The intent is to establish contextual residency for a session prior to allowing an particular action.
Pages inheriting from the CorePage class can validate against a submitted ticket before continuing.
Tickets may be general purpose, or may be restricted to specific URIs.
Some style changes were made to improve browsing experience, and to alter the window gizmos.
