Clean and set read-only attributes.
Rename poster_ids attribute to actor_ids for logical consistency.
Start adding AJAX CSRF protection (#78).
Move keygen to settings route.