update url tags for newer django

use STATIC_URL instead of MEDIA_URL
fix templatetags
fix whitespace
remove locations field

avoid exploding if no users are available
fix invalid filename
include csrf token with ajax requests
don't explode for unauthenticated users