Fix bug 899642 - Only add CSRF token to same-origin requests
0.0.115