comments #11 - CSRF implmented but failing unittests

Signed-off-by: Alexander Skjolden <alex@plastboks.net>
Merge branch 'csrf' into develop