diff --git a/gallery/__init__.py b/gallery/__init__.py
index 0e54219..42ff00b 100644
--- a/gallery/__init__.py
+++ b/gallery/__init__.py
@@ -75,9 +75,10 @@ def create_app():  # pylint: disable=R0914
         migrate_upgrade(directory=MIGRATIONS_DIR)
 
     # LOGIN MANAGER
+    # can also set session_protection to "strong"
+    # this would protect against session hijacking
     login_manager.init_app(app)
     login_manager.login_view = "gallery.index"
-    # login_manager.session_protection = "strong"
 
     @login_manager.user_loader
     def load_user(user_id):
diff --git a/gallery/static/js/notifications.js b/gallery/static/js/notifications.js
index 1cda690..3674625 100644
--- a/gallery/static/js/notifications.js
+++ b/gallery/static/js/notifications.js
@@ -1,14 +1,14 @@
 function addNotification(notificationText, notificationLevel) {
-    let notificationContainer = document.querySelector('.notifications');
+    const notificationContainer = document.querySelector('.notifications');
 
     // Set the different icons for the different notification levels
-    let successIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M229.66,77.66l-128,128a8,8,0,0,1-11.32,0l-56-56a8,8,0,0,1,11.32-11.32L96,188.69,218.34,66.34a8,8,0,0,1,11.32,11.32Z"></path></svg>';
-    let criticalIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M236.8,188.09,149.35,36.22h0a24.76,24.76,0,0,0-42.7,0L19.2,188.09a23.51,23.51,0,0,0,0,23.72A24.35,24.35,0,0,0,40.55,224h174.9a24.35,24.35,0,0,0,21.33-12.19A23.51,23.51,0,0,0,236.8,188.09ZM222.93,203.8a8.5,8.5,0,0,1-7.48,4.2H40.55a8.5,8.5,0,0,1-7.48-4.2,7.59,7.59,0,0,1,0-7.72L120.52,44.21a8.75,8.75,0,0,1,15,0l87.45,151.87A7.59,7.59,0,0,1,222.93,203.8ZM120,144V104a8,8,0,0,1,16,0v40a8,8,0,0,1-16,0Zm20,36a12,12,0,1,1-12-12A12,12,0,0,1,140,180Z"></path></svg>';
-    let warningIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M128,24A104,104,0,1,0,232,128,104.11,104.11,0,0,0,128,24Zm0,192a88,88,0,1,1,88-88A88.1,88.1,0,0,1,128,216Zm16-40a8,8,0,0,1-8,8,16,16,0,0,1-16-16V128a8,8,0,0,1,0-16,16,16,0,0,1,16,16v40A8,8,0,0,1,144,176ZM112,84a12,12,0,1,1,12,12A12,12,0,0,1,112,84Z"></path></svg>';
-    let infoIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M128,24A104,104,0,1,0,232,128,104.11,104.11,0,0,0,128,24Zm0,192a88,88,0,1,1,88-88A88.1,88.1,0,0,1,128,216Zm16-40a8,8,0,0,1-8,8,16,16,0,0,1-16-16V128a8,8,0,0,1,0-16,16,16,0,0,1,16,16v40A8,8,0,0,1,144,176ZM112,84a12,12,0,1,1,12,12A12,12,0,0,1,112,84Z"></path></svg>';
+    const successIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M229.66,77.66l-128,128a8,8,0,0,1-11.32,0l-56-56a8,8,0,0,1,11.32-11.32L96,188.69,218.34,66.34a8,8,0,0,1,11.32,11.32Z"></path></svg>';
+    const criticalIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M236.8,188.09,149.35,36.22h0a24.76,24.76,0,0,0-42.7,0L19.2,188.09a23.51,23.51,0,0,0,0,23.72A24.35,24.35,0,0,0,40.55,224h174.9a24.35,24.35,0,0,0,21.33-12.19A23.51,23.51,0,0,0,236.8,188.09ZM222.93,203.8a8.5,8.5,0,0,1-7.48,4.2H40.55a8.5,8.5,0,0,1-7.48-4.2,7.59,7.59,0,0,1,0-7.72L120.52,44.21a8.75,8.75,0,0,1,15,0l87.45,151.87A7.59,7.59,0,0,1,222.93,203.8ZM120,144V104a8,8,0,0,1,16,0v40a8,8,0,0,1-16,0Zm20,36a12,12,0,1,1-12-12A12,12,0,0,1,140,180Z"></path></svg>';
+    const warningIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M128,24A104,104,0,1,0,232,128,104.11,104.11,0,0,0,128,24Zm0,192a88,88,0,1,1,88-88A88.1,88.1,0,0,1,128,216Zm16-40a8,8,0,0,1-8,8,16,16,0,0,1-16-16V128a8,8,0,0,1,0-16,16,16,0,0,1,16,16v40A8,8,0,0,1,144,176ZM112,84a12,12,0,1,1,12,12A12,12,0,0,1,112,84Z"></path></svg>';
+    const infoIcon = '<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="currentColor" viewBox="0 0 256 256"><path d="M128,24A104,104,0,1,0,232,128,104.11,104.11,0,0,0,128,24Zm0,192a88,88,0,1,1,88-88A88.1,88.1,0,0,1,128,216Zm16-40a8,8,0,0,1-8,8,16,16,0,0,1-16-16V128a8,8,0,0,1,0-16,16,16,0,0,1,16,16v40A8,8,0,0,1,144,176ZM112,84a12,12,0,1,1,12,12A12,12,0,0,1,112,84Z"></path></svg>';
 
     // Create notification element
-    let notification = document.createElement('div');
+    const notification = document.createElement('div');
     notification.classList.add('sniffle__notification');
     notification.onclick = function() {
         if (notification) {
@@ -21,7 +21,7 @@ function addNotification(notificationText, notificationLevel) {
     };
 
     // Create icon element and append to notification
-    let iconElement = document.createElement('span');
+    const iconElement = document.createElement('span');
     iconElement.classList.add('sniffle__notification-icon');
     notification.appendChild(iconElement);
     
@@ -41,7 +41,7 @@ function addNotification(notificationText, notificationLevel) {
     }
 
     // Create text element and append to notification
-    let description = document.createElement('span');
+    const description = document.createElement('span');
     description.classList.add('sniffle__notification-text');
     description.innerHTML = notificationText;
     notification.appendChild(description);
diff --git a/gallery/static/js/popup.js b/gallery/static/js/popup.js
index 301c5b2..70506fd 100644
--- a/gallery/static/js/popup.js
+++ b/gallery/static/js/popup.js
@@ -1,19 +1,19 @@
 function popUpShow(titleText, subtitleText, bodyContent=null, userActions=null) {
     // Get popup elements
-    let popupSelector = document.querySelector('.pop-up');
-    let headerSelector = document.querySelector('.pop-up-header');
-    let actionsSelector = document.querySelector('.pop-up-controlls');
+    const popupSelector = document.querySelector('.pop-up');
+    const headerSelector = document.querySelector('.pop-up-header');
+    const actionsSelector = document.querySelector('.pop-up-controlls');
 
     // Clear popup elements
     headerSelector.innerHTML = '';
     actionsSelector.innerHTML = '';
 
     // Set popup header and subtitle
-    let titleElement = document.createElement('h2');
+    const titleElement = document.createElement('h2');
     titleElement.innerHTML = titleText;
     headerSelector.appendChild(titleElement);
 
-    let subtitleElement = document.createElement('p');
+    const subtitleElement = document.createElement('p');
     subtitleElement.innerHTML = subtitleText;
     headerSelector.appendChild(subtitleElement);
 
@@ -39,7 +39,7 @@ function popUpShow(titleText, subtitleText, bodyContent=null, userActions=null)
 }
 
 function popupDissmiss() {
-    let popupSelector = document.querySelector('.pop-up');
+    const popupSelector = document.querySelector('.pop-up');
 
     document.querySelector("html").style.overflow = "auto";
     popupSelector.classList.remove('active');
diff --git a/gallery/static/js/webp.js b/gallery/static/js/webp.js
index c39c4ff..93a4ade 100644
--- a/gallery/static/js/webp.js
+++ b/gallery/static/js/webp.js
@@ -1,5 +1,5 @@
 function checkWebpSupport() {
-    var webpSupport = false;
+    let webpSupport = false;
     try {
         webpSupport = document.createElement('canvas').toDataURL('image/webp').indexOf('data:image/webp') === 0;
     } catch (e) {