CSRF Tokens

Using CSRF tokens to preveng against some Cross-Site Request Forgery exploits.
Plus, logout is now a POST instead of a GET.