Fix our CSRF vulnerability

[BenSurgisonGDS]

See: https://dev-academy.com/csurf-vulnerability/

What

The package we currently use (csurf) has been deprecated due to a vulnerability. This needs to be replaced with the new accepted package csrf-csrf and implemented as described in the link.

Why

As a user, I want to be sure that the the kit is secure and safe to use

Who needs to work on this

Developer

Done when

Tasks

Beta Give feedback

1. The csurf package has been replaced with the csrf-csrf package and all the tests still work