Add sfsr protection and admin pwd change script for powershell

app.py

@@ -12,6 +12,7 @@ from secrets import token_urlsafe
 from hashlib import sha256
 
 from flask import Flask, abort, flash, g, redirect, render_template, request, session, url_for
+from flask_wtf.csrf import CSRFProtect
 import pyotp
 import qrcode
 from werkzeug.security import check_password_hash, generate_password_hash
@@ -30,6 +31,7 @@ app.config.update(
     MAIL_FROM=os.environ.get("MAIL_FROM", "noreply@eternityproject.fi"),
     PUBLIC_URL=os.environ.get("PUBLIC_URL", "http://localhost:8000").rstrip("/"),
 )
+csrf = CSRFProtect(app)
 
 
 def get_db():