Security/csrf hardening

CSRF as it stands can be easily fooled, since it only checks that the cookie and post variable match. This change hashes one of the values with a secret string so forgers cannot submit false data without knowing the secret.