Enforce CSRF for post/asset and post/account

Tiny bit of tidying

account_edit_modal.php

@@ -9,6 +9,7 @@
             </div>
             <form action="post.php" method="post" autocomplete="off">
                 <input type="hidden" name="account_id" value="<?php echo $account_id; ?>">
+                <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
                 <div class="modal-body bg-white">
                     <div class="form-group">
                         <label>Account Name <strong class="text-danger">*</strong></label>