Implemented Server [un]favouriting REST methods

serverstf.js updated to include ServerEntry.favourite and
ServerEntry.unfavourite. CSRF token also passed in headers
during ajax requests.