Refactor: whitespace / phpDoc / remove unnecessary HTML comment and type attribute for script block
Security: Remove deliberate session fixation (which would make CSRF token would be pointless) to overcome ancient Flash upload issue
Fixed Cross Site Request Forgery protection (issue #537)
Merge branch 'develop' into bugfix/537-csrf-protection

Conflicts:
	templates/editentity.php
	www/AJAXRequestHandler.php
Merge branch 'develop' into bugfix/537-csrf-protection

Conflicts:
	www/AJAXRequestHandler.php
Merge pull request #539 from janus-ssp/bugfix/537-csrf-protection

[REVIEW] csrf protection