Add CSRF protection

This requires that all effectful requests be done via ajax, which I
think is already true. If we wish to support normal forms, that is
possible, but will require slightly more work.

The "light" base template is not quite as light as before. Oh well.
'in' is not what I meant here
Require POST on effectful methods in group editor

Why I didn't do this originally, I'm not sure.

Also, TIL, if you use __lookup__, whatever you return will be treated
like a Controller, regardless of whether it actually is or not.
Do admin searches as GETs
Clean up dead JS
Merge pull request #248 from eve-val/fix-group-requests

Require POST on effectful methods in group editor
Make the character portraits in the key table link to the appropriate character detail pages.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
Rename the admin link in the side navigation bar to Admin Panel.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
Fix a bug where duplicate keys could be added to Core.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
Move the minimum key ID needed to add a key to the config.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
Fix a bug that led to API key verification codes being displayed in their entirety.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
Merge pull request #257 from Acidity/feature/minKeyID

Move the minimum key ID needed to add a key to the config.
Merge pull request #255 from Acidity/feature/fixKeyCode

Fix a bug that led to API key verification codes ebing displayed in their...
Merge pull request #256 from Acidity/feature/fixKeyDups

Fix a bug where duplicate keys could be added to Core.
Merge pull request #254 from Acidity/feature/admin

Rename the admin link in the side navigation bar to Admin Panel.
Merge pull request #253 from Acidity/feature/fixChar

Make the character portraits in the key table link to the appropriate...
Update UPDATE-README for release 0.6.3

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>
Merge branch 'release0.6.3'
Merge pull request #247 from eve-val/csrf-protection

Csrf protection (fixes #92)
Add @authenticate decorator for detecting if a user is logged in, and throwing an HTTP 401 if they are not.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>