Session-free CSRF prevention & NGINX fast-cgi cache

Hi Jonny,
This request contains 2 patches:
1. The patch to remove session\cookie from CSRF prevention mechanism. This part is required by nginx fast-cgi cache modification (more pages can be cached ;).
2. The patch to allow nginx to cache public pages.
Mike