CSRF protect all of the things

[nlipke]

[snipe]

I have to see if there's something special laravel needs for this. I have CSRF protection in all of the forms, but haven't tested that yet, so if it's not working, I need to figure out why.

[nlipke]

I didn't test it just inspected a delete and a checkin/checkout.

[nlipke]

Checkout does have a token as it's a form, but checkin & delete don't

[snipe]

Yeah, only post requests have tokens

[snipe]

All actions require authentication though