Remove non-fuctional CSRF protection

- will need another way to prevent CORS when in production
Revert "Add balsamiq mockups"

This reverts commit fbff61155ce4f865fa211f7b568616300f1eb412.
Revert "Remove non-fuctional CSRF protection"

This reverts commit d7c6372824861922b2ecc109f67e96080a93b9f1.
Revert "Revert "Add balsamiq mockups""

This reverts commit bb1f8c0f22d1bc1f76da3ef8022ccd61942dff24.