Bug 865853 privacy spam prevention

Looking for sanity check review on CSRF handling. May need approved copy on CSRF view?