Add csrf tokens to menu urls that need it and
implement auto csrf fixes