STORM-460: Fix for storm CSRF vulnerability using ring-anti-forgery.

I have tested the ui in 36.0.1985.143 and firefox-24.0. That said, I know pretty much nothing about ui , css or javascript so any comments will be helpful.