[FIX] CSRF protection for admin settings/user/news
Merge pull request #2227 from MPOS/admin-csrf-protection

[FIX] CSRF protection for admin settings/user/news