Made logout spoof safe

* changed template to call a form which submits a post with csrf token
* changed view method to ensure csrf token, only allow posts to logout
updating posts via webservice (put request) works
adding posts via put restfully works
Merge branch 'rest_post' of https://github.com/awwong1/CMPUT410-Project into rest_post
fixed merge conflict
Changed friend action button colour from red to yellow
fixed broken links in friends page when clicking on username
fixed merge conflict