Sanitize the session_id/logout_id in captive portal.
More $Id and whitespace
from more obscure folders around the code
For captive portal, if a user reloads index.php of the portal while already logged in, show the logout page instead if it's custom.
Must be a custom logout page that does not include a redirect.
Move main pfSense content to src/