csrf support, fix #38
added Editable::source method, fix #37