CSRF check in the settings

settings/ajax/changepassword.php

settings/ajax/creategroup.php

settings/ajax/createuser.php

settings/ajax/disableapp.php

settings/ajax/enableapp.php

settings/ajax/lostpassword.php

settings/ajax/openid.php

settings/ajax/removegroup.php

settings/ajax/removeuser.php

settings/ajax/setlanguage.php

settings/ajax/setloglevel.php

settings/ajax/setquota.php

settings/ajax/togglegroups.php