Added CSRF plugin, progress with BSA, redone template system so handler functions are now models.