Feature/2.0 no search csrf

CSRF protection is designed to stop people taking unintentional actions when submitting a form. A search is not an action - it's perfectly valid & useful to link to some search results, so it doesn't need CSRF protection. In GBK, I would like to put links on edit pages in one category to search results of another.

In general, any GET request shouldn't need CSRF protection - GET requests should only fetch data, POST requests should always be used to take an action. CSRF is used to dupe users into unintentionally taking an action.

Also copied typo fix from master to 2.0 branch