LDEV-4932 Initial integration of CSRF Guard Add library and configuration file. Only Edit Profile form has a token injected into form. Other POSTed forms will be stopped by the Guard, with an error logged.
LDEV-4710 Add config setting to enable "Forgot your password?" option Also if people try to get to the login page by going to the URL directly, we display a 404 error message.