Moved LESS/CoffeeScript to extras directory, fixed terms/privacy links, additional CSRF test, removed hard-coded var.