Update requirements.
Update tests for Unicode-correctness.

And catch a possible Unicode leak in util.
forms: Get model_form() working again with newer WTForms.
templates/macros: Don't label CSRF tokens.