Evaluate CSRF solutions and implement

Primary issue : If page is not refreshed for a longer time, the CSRF token times out

(from redmine: issue id 352, created on 2018-01-22tgradl)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information