Implement CSRF protection.

Currently Broken:
=================
- [ ] admin
   * I'm going to work with the maintainers of Flask-SuperAdmin to get support
     for csrf protection.