[UPDATE] CSRF protection, more info in login notification

Mobile templates - updated but not tested thoroughly.

 * Adds CSRF protection for multiple pages, see bottom
 * Adds User/IP/Date & time to successful login notification
 * New config option for sitewide CSRF protection
 * The ability to disable CSRF protection with granularity
 * Fixed a bug in the contact form
 * Lots of cleanup related to CSRF stuff
 * Improved UI and fixed bug(s) with E-mail confirmations
  * Fixed reset and change password templates; were missing csrf token
  * Changes expiration length of e-mailed tokens to 1 hour
 * Fixed logic bug in login page (issues #1459, #1461)
 * Fixes a bug in tools class where an incorrect config setting could throw a notice
 * Fixes a bug in news class that throws a notice found by @neozonz
 * Fixes a bug in overview template that could throw a notice under certain conditions
 * Adds simple unit test harness with PHPUnit
 * Adds notify_email and signup_timestamp to account table w/ get methods for later
  * Sets signup_timestamp when a user registers
 * Increments config version
 * Increments db version
 * CSRF protection for
   * register, contact, account edit, workers, notifications, password resets, invites, and account unlocks