Evaluate CSRF solutions and implement
Primary issue : If page is not refreshed for a longer time, the CSRF token times out
(from redmine: issue id 352, created on 2018-01-22tgradl)
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information