Implemented CSRF protection by generating a cookie/token pair with each GET request when a handler requires it. Also updated the way the staff navigation bar is setup
Update the description of the staff navbits