ACL specific csrf protection

- Migrated from mtj.flask.evetracker.