can it be some kind of outside attack? I changed the port in /etc/lighttpd/lighttpd.conf and there were not any /tmp/cgisess_* files until I tried to login. When I tried it still asked for s/n so I am not sure if it is fixed yet. and the error in stdout says --HTTP-X-CSRF-TOKEN in /usr/share/glweb/login.html is not transferred