few last changes before 1st beta

formatted all python code to use double quotes
added CSRF token to comment submit