Implement CSRF protection.

This pull request provides proper csrf protection for the website as well as fixing how some config values were setup in `config.py`.

Fixes #178.

### Currently Broken:
- [ ] admin

I'm going to work with the maintainers of Flask-SuperAdmin to get support for csrf protection. https://github.com/SyrusAkbary/Flask-SuperAdmin/issues/129

- [ ] propogate csrf token throught JS objects

Currently, any AJAX calls (aside from ones on the landing page) fail due to `self.csrftoken` being undefined on all templates that don't extend `base.html`.

@jhladky I could really use help with the last issue; I'm not sure how to get the `csrftoken` var throughout the JS objects.
@brotatos this can be used here since the context still refers to the ieee object. In fact I would hope is does, considering self is assigned only 3 lines earlier!