AppDomainResolver now manually includes Microsoft.CSharp assembly to prevent runtime exceptions on template compilation
Removed unnecessary Microsoft.CSharp reference
Added anti-CSRF functionality to Core
HtmlResponse and XHtmlResponse constructor overloads added to integrate with anti-CSRF functionality
Added missing cookieName parameter to forms authentication helper method
Added support for anti-CSRF validation
Async endpoints methods now supported
Previous anti-CSRF implementation did not work when users submitted previously-generated forms because only one nonce was tracked per session ID; new implementation can track several nonces per session ID with expiration