Enforce CSRF for post/asset and post/account

Tiny bit of tidying

client_contacts.php

@@ -188,6 +188,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
             <hr>
             <form id="bulkActions" action="post.php" method="post">
                 <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
+
                 <div class="table-responsive-sm">
                     <table class="table border">
                         <thead class="thead-light <?php if (!$num_rows[0]) { echo "d-none"; } ?>">