add CSRF protection
add ini_set() of mbstring setting
remove `.htaccess` and save `.htaccess.recommend`
remove ini_set-'mbstring.encoding_translation' (PHP_INI_PERDIR)
X-elFinder Version 0.58