Add XSRF tokens to every POST.
Remove unneeded old-style configuration file.
Add a custom error handler for the error raised by XSRF check failures.
Merge branch 'xsrf-protect'