attempt to plug CSRF attack
Use a random token and verify it on POST requests
Add CSRF token into signin view
Add csrf_token input to dash, new, and site_files/new views
Update csrf_safe? to check the headers. Add some JS code to insert the CSRF token into the XHR request headers.
Merge pull request #4 from mikeycgto/csrf_fix

Updates for CSRF protection
Merge branch 'csrf_fix'