Check if input is actually a string

PHP helpfully creates arrays when passing paramaters as ?name[]=value.
Website/Request->getRequestString must only return strings, so we have
to check for this.
Centralize setup logic

Reduces duplicate code between datepicker.php, index.php and rss.php.
Add CSRF protection to article delete page