Add CSRF and cookies protection; bugfix error handling on point editing.