Handle csrf stored in sessions

[Intestinall]

This allow to use CSRF_USE_SESSIONS = True which store crsf token in session instead of cookies.
It checks if csrf token found in cookies otherwise try to get csrf token in session.

[Pyvonix]

Use full modification !
When CSRF_USE_SESSIONS = True in settings.py when can't use mardkownx => 403 error, with is modification the error is fixe.

[JeroenvO]

It would be nice to have this implemented :)

[Pyvonix]

Yes for sure, this feature will be very useful when we change the method to handle the CSRF token.
In this MR, @Darkaird propose a simple way:

if we find the CSRF token:
   deal with it
else:
   search it in sessions

There is surely a way "more pretty" by giving the mode used by Django to handle the token from the settings.py but this is much more complex and this way can completely do the job.

The fact that travis-ci job crash is not to be considered because no language set for the job who fail. What is necessary to add this feature @adi- or @xenatisch ?

[JeroenvO]

There is surely a way "more pretty" by giving the mode used by Django to handle the token from the settings.py but this is much more complex and this way can completely do the job.

In that case django has to parse the .js file as template before serving it, thats not pretty either.

[adi-]

But why there is this bac787b#diff-fd2204ac82e19c15973d9a6bb1452905R126 line left in the code? It should be deleted.

[JeroenvO]

Clearly a mistake indeed, i overlooked it in the diff. Can you correct or comment on this @TheBuky

[adi-]

Also, please update PR to latest code from github. There is already a fix for travis error.

[Intestinall]

My bad, what a shameful newbie mistake...
I just edit it.

[Pyvonix]

@adi- Can you be more precise about the PR?
We need rebase branch Darkaird\patch-3 onto django-markdownx\develop or your master?

[AjibsBaba]

This allow to use CSRF_USE_SESSIONS = True which store crsf token in session instead of cookies.
It checks if csrf token found in cookies otherwise try to get csrf token in session.

This was helpful