[UPDATE] CSRF protection, more info in login notification

Mobile templates not yet updated.

 * Adds CSRF protection for multiple pages, see bottom
 * Adds User/IP/Date & time to successful login notification
 * New config option for sitewide CSRF protection
 * Fixed a bug in the contact form
 * Lots of cleanup related to CSRF stuff
 * Adds simple unit test harness with PHPUnit
 * Adds notify_email and signup_timestamp to account table w/ get methods for later
  * Sets signup_timestamp when a user registers
 * Increments config version
 * Increments db version
  * CSRF protection: register, contact, account edit, workers, notifications, and invites