Split actions into individual views

Sending the csrf token to action views was an overkill because we need to be logged in and have the admin permission anyway, so took it out.