Added simple csrf to logout
Fixed csrf for friends and unblocking users