Merge pull request #14 from jpvanhal/referer-fix

Fixed referer checking.
making sure we support Python 2.6 and 2.5
bump version 0.1.13
Use flask.g instead of flask.session to prevent unnecessary cookie sending
Merge pull request #17 from martynsmith/master

Prevent modifying the session unless necessary
Fixed bug in docs for CSRF_DISABLE config name
Merge pull request #18 from alanhamlett/master

bug in docs for CSRF_DISABLE config name
removed app secret key from salt for csrf cookie value to fix issue #25
removed config settings for secret key in test cases and package code as they are no longer used.
Merge pull request #26 from alanhamlett/master

remove secret from hashed cookie value
allow cross-domain ajax over https

for more info see https://developer.mozilla.org/en-US/docs/HTTP/Access_control_CORS#Access-Control-Allow-Origin

also, allowed setting custom name for the http header.
incrementing version
Fixed exception in the case where _csrf_token is not available in Flask.g
Merge pull request #28 from jgelens/master

Fixed exception in the case where _csrf_token is not available in Flask.g
version 0.1.15
Merge pull request #27 from ryankshaw/patch-1

allow cross-domain ajax over https
version 0.1.16
Remove Jinja2 dependency by always setting the CSRF token if the request's endpoint should be protected.
version 0.1.17
removing docs/_build