Finish CSRF implementation

[qixils]

Need to setup some sort of node server to handle requests for frontend files which injects the CSRF token into the page somewhere

Or that can be bypassed by having the token just be added as a cookie and passed into API requests that way (note that the backend should not check for the existence of the CSRF cookie, instead it should check to see if the CSRF token passed into the body or query is correct)