[Security] Enable and enforce CSRF protection across all POST routes

-Enable Flask-WTF CSRF
-Add tokens to forms
-Handle AJAX requests properly
-Add CSRF error handler

current csrf is not enabled and will lead to security errors