Re-enabled CSRF protection for Policies and Divisions; fixes #445.
Merge pull request #526 from damncabbage/csrf-protection-445

Re-enabled CSRF protection for Policies and Divisions.