New

• spa: React SPA foundation with session auth, Redis login guard, CSRF protection #533