[webui] Reintroduce CSRF protection for the webui. AUA!
[dist] complete 2.4.6 release notes