Fix #148; Django now requires AJAX posts to present the CSRF token. Added code suggested by Django docs to shoutbox.js. Since shoutbox.js is on every page, it should cover all cases.

{% extends 'base.html' %}
{% block title %}{{ flatpage.title }}{% endblock %}
{% block content %}
<h2>{{ flatpage.title }}</h2>
{{ flatpage.content }}
{% endblock %}