Enabled CSRF protection.
Added required CSRF token to all traditional forms.
Added CSRF token handling to all socket and ajax POST/PUT request.
Added CSRF token to socket delete actions.