Improve security on web form

The web-ui proposes some forms to submit data through post requests (web part). Those are security sensitive http://flask.pocoo.org/docs/0.10/security/.

csrf example: http://flask.pocoo.org/snippets/3/

---

Migrated from T348 (view on Phabricator)

added Web app priority:Normal labels

CSRF shouldn't be an issue for us (at least for now), since we don't have authenticated users (yet)

assigned to @zack

added state:invalid label

closed