Let whitelisted pages generate CSRF tokens
Merge pull request #934 from stenington/whitelisted-csrf

Let whitelisted pages generate CSRF tokens