Add CSRF protection for the enable/disable client routes

pfrilling → credited ericgsmith → .

pfrilling → credited jcnventura → .

pfrilling → credited mr.baileys → .

pfrilling → credited mstrelan → .

Marking this as RTBC as the code was already reviewed in a patch on s.d.o.

Alpha6 → causes an issue in keycloak reported by two others

I'm not sure which change in alpha6 is causing this.

Doesn't make sense for that to be the parent issue, removing.

Automatically closed - issue fixed for 2 weeks with no activity.