Fixed a bunch of XSRF issues                      (Especially one-click
post spoofing, report spoofing, and signature spoofing.)