protection against CSRF attacks
we now check the referer to prevent CSRF attacks
less buggy csrf protection
whitelisted the upload in csrf protection
fixed : wzin background is sometimes permanent
slightly less hard to read the intro on a mobile