Make mark as paid button not appear if user is already paid for current year
Change wording of xsrf attack message
Merge pull request #10 from UniversityRadioYork/samw-tweaks

Samwuh tweaks