GitLab

This is very likely a breaking change and will force all code bases that
haven't already do so to migrate to pyramid as web server.

90% of the job has been porting and adapting a lot of tests code.

See pyramid documentation as a reference:

* https://docs.pylonsproject.org/projects/pyramid/en/2.0-branch/narr/security.html#preventing-cross-site-request-forgery-attacks
* https://docs.pylonsproject.org/projects/pyramid/en/2.0-branch/narr/security.html#checking-csrf-tokens-automatically
* https://docs.pylonsproject.org/projects/pyramid/en/latest/api/csrf.html#pyramid.csrf.CookieCSRFStoragePolicy