Caching tweaks: don't set sessionid cookie unnecessarily (on every request)
Merge branch 'performance' of git://github.com/bcipolli/ka-lite into performance
Re-enabled CSRF, but read token from cookie so it isn't always generated.
Merge remote-tracking branch 'jamalex/performance' into performance

Conflicts:
	kalite/main/middleware.py