Fix csrf_autoload bug. It be check only 'POST', 'PUT' and 'DELETE' http methods.

Currently check allmethod on csrf_autoload is true.  
It will be catch \SecurityException when I access to some pages by http GET method.

this pull request check http methods and run check_token() only post, put and delete method.