Added CSRF token setting to every request;
Implementing chart_heading title setting, persisting and loading;
Added a spinner to viz_save button
Merge branch 'develop' of https://github.com/prjts/open-budget into develop
Added X-CSRFToken HTTP header to CORS_ALLOW_HEADERS
Fixed X-CSRFToken header setting
Fixed item's components state handling according to picking/chart state
Font sizes for chart_heading