- Patch #181063 by chx and bjaspan: fixed problem with drupal_bootstrap() not booting to the proper level.

#160107 by JohnAlbin: use the same session ID regardless of the protocol used to access the page (eg share sessions between http and https pages)

#56357 by JohnAlbin, et al. Improve cookie naming to prevent conflicting cookies set on the same domain name.

 Backport from HEAD.

#100516: CSS preprocessor to cache and compress all .css files. Benchmarks show up to 40% faster page loads.

- Patch #80725 by chx: move the access check up in the bootstrap process. Like that we don't have to load the session when the address is denied access.  Can be a notable performance improvement when you block crawlers.

  performance of drupal_is_denied().