Try again w/ csrf + Referer; #1085
Bump version to 9.2.3
Bump version to 9.2.3-dev