Fix CSRF protection for admin to be AJAX compatible
CSRF protect logo voting