(cherry picked from commit f3c0f74f)

(cherry picked from commit 5ba281e8)

(cherry picked from commit 7504bd00)
(cherry picked from commit 465cd35a)
(cherry picked from commit 867a9a95)

(cherry picked from commit b6c6eec2)

(cherry picked from commit 200bd3ee)
(cherry picked from commit 1464b111)
(cherry picked from commit 8ba7da8f)

(cherry picked from commit b3c76778)

https://github.com/opnsense/core/issues/1483

(cherry picked from commit 66de2bde)

(cherry picked from commit 852261b6)

(cherry picked from commit 0995f558)

(cherry picked from commit 4388146c)

(cherry picked from commit 50b5de04)
(cherry picked from commit 2cf06c64)

(cherry picked from commit 2407fa01)

(cherry picked from commit cbea88de)

(mvc) csrf protection, not very likely to hit in normal situations, but when using legacy free applications, there might not be a csrf token leading to a denial of all requests.

(cherry picked from commit 29e3bb3e)

(cherry picked from commit 50f2ffad)

(cherry picked from commit dd2a605d)

PR: https://forum.opnsense.org/index.php?topic=4682.0

(cherry picked from commit 844d6b50)
(cherry picked from commit b8c9eb47)
(cherry picked from commit 2d03d196)

(cherry picked from commit ea0eeadf)

(cherry picked from commit 72e46245)
(cherry picked from commit 83b5aae6)

(cherry picked from commit 9821d6fb)

(groups) align groupname length, like https://github.com/opnsense/core/commit/0829a34cef456c0065435405e965c45e8077d369

(cherry picked from commit 137dda20)

(cherry picked from commit c2190c1f)
(cherry picked from commit c7f46324)

(cherry picked from commit 4f88afdf)

(cherry picked from commit 910ee163)

(cherry picked from commit 03e59623)

(cherry picked from commit 2058b1cf)

(cherry picked from commit cdaa7aff)
(cherry picked from commit 069019c8)

PR: https://github.com/opnsense/core/issues/1455

(cherry picked from commit f6d83a94)
(cherry picked from commit 1dabd53d)
(cherry picked from commit 73b1d444)