Better CSRF handling
Authetication problem in thread pages (and other pages as well) is fixed
Naive implementation of the user profile page