Change from get to post + CSRF

Budget for employer, CSRF protection, etc
Added option from employer balance
Added CSRF token refresh
Added CSRF token
XSS fix
Token update
Employer balance
Updates balance from int to double