Remove unused import
Pyramid 1.5 deprecations

Switch to new versions of deprecated Pyramid features. We already
list Pyramid >= 1.5 in setup.py.
Use Pyramid 1.5 CSRF checking machinery

This eliminates the subscriber hack and allows us to use the check_csrf
view predicate in the future by making Angular send the header that
Pyramid expects.
Remove unused variable