BibDocFile: duplicate docname fix

* Fixes an issue when checking duplicate docnames in the
  BibDocFile client that caused a false alert.  (PR #1930)

* Fixes the report output which had the wrong order of arguments.

Reported-by: Alexander Wagner <a.wagner@fz-juelich.de>
Signed-off-by: Jan Aage Lavik <jan.age.lavik@cern.ch>
Reviewed-by: Tibor Simko <tibor.simko@cern.ch>
WebSession: CSRF tokens in account settings forms

* Improves internal account settings edit page (`/youraccount/edit`)
  by generating unique CSRF tokens valid five minutes.  (closes #1855)

* Accepts only POST requests and verifies CSRF token expiry when
  performing desired settings change (`/youraccount/change`).

Reported-by: Bessem Amira <bessem.amira@cnudst.rnrt.tn>
Signed-off-by: Tibor Simko <tibor.simko@cern.ch>
Reviewed-by: Samuele Kaplun <samuele.kaplun@cern.ch>
Merge branch 'maint-1.0' into maint-1.1

* maint-1.0:
  WebSession: CSRF tokens in account settings forms
  BibDocFile: duplicate docname fix

Conflicts:
	modules/bibdocfile/lib/bibdocfilecli.py
	modules/websession/lib/webaccount.py
	modules/websession/lib/websession_regression_tests.py
	modules/websession/lib/websession_templates.py
	modules/websession/lib/websession_webinterface.py
	modules/websession/lib/webuser.py

Signed-off-by: Tibor Simko <tibor.simko@cern.ch>
WebSession: CSRF token in API key settings form

* Adds CSRF token to the API keys settings form as well.  Amends template
  and `/youraccount/apikey` handler accordingly.  (see #1855)

Signed-off-by: Tibor Simko <tibor.simko@cern.ch>