Feature/2.0 no search csrf

CSRF protection is designed to stop people taking unintentional actions when submitting a form. A search is not an action - it's perfectly valid & useful to link to some search results, so it doesn't need CSRF protection. In GBK, I would like to put links on edit pages in one category to search results of another.

In general, any GET request shouldn't need CSRF protection - GET requests should only fetch data, POST requests should always be used to take an action. CSRF is used to dupe users into unintentionally taking an action.