Apply the CSRF protection for consumer management.

  - Also test that this was really done for the important forms.
Just abort the 0.4.1 when fixing this.

  - This better be the last failure like this.