* [ADDED] CSRF token checks to worker page * [CHANGED] Check for both _GET and _POST ctokens * [ADDED] CSRF token to each delete call URL Fixes #1702 once merged