Merge pull request #14 from acmetech/master

add default protect from forgery