CSRF: Setup basic protection using WTF's implemetation.

To-do:
This breaks the admin panel since Flask-SuperAdmin
just uses the regular Form class rather than
WTForms (so it will lack the CSRF token); I need
to extend the base class in order to fix this.