Added Cross Site Request Forgery (CSRF) protection

require csrf token for all post, delete, and put actions