Roles needs a default for SQLite.
Tweaking Simpleforms.. Added option to disable CSRF. Revert to using getting the IP-address ourselves.
Added 'csrf' option to config.yml.dist.