add default protect from forgery
Merge pull request #14 from acmetech/master

add default protect from forgery