csrf for addlistitem and manage_site_files (#1798)