Added XSRF check to posts and comments
Merge remote-tracking branch 'upstream/master'