adds csrf protection.
implements aproval-change feature.
removes unnecessary logging.
cleanup.
Merge pull request #59 from birkin/master

implements aproval-change feature.