Add a flag to track CSRF protection status - used internally
Added the first of the basic CRUD actions to the EndpointController base class.

Assuming your controllers set up a value for this.model when they are constructed
this will now mean you can inherit the following actions from EndpointController:
  - main
  - remove
  - removeForm
  - index
The rest, create, update, and editForm are pending the addition of a schema for
mapping request body fields to model fields.