CodeStyle
Fix: #4389 - move the CSRF token to the end of all forms, so we can detect truncated input variables
Refactor controller-actions as request-handlers