add csrf token check for settings and its environments
add Force Logout in maintenance mode Function: if it enabled the system will kick out the user from the dashboard, but if not enabled the system will retain the user login section and display maintenance mode message.
Maintenance Mode when enabled user/customer will not be able to login, a maintenance page will be displayed instead. but all admin users can login
