Stop binding the token to a variable

This removes the *anti-forgery-token* variable,
and changes the token key to be easily accessible.

To get the token use ((request :session) :__anti-forgery-token))
Merge branch 'remove-variable'
Change urls and project name