Fix various CSRF holes in forum module (from upstream).
Check CSRF on unsubscribe, too.
Fix security tokens in a few places in template.
Update to SilverStripe 3.1.3 (some security fixes, minor updates)