Csrf fix

f-awesome

Bumping rack-protection to v1.5.1 seems to fix issue where newcomers would get a CSRF exception https://github.com/rkh/rack-protection/commit/c415d50c7ce97d35c8fae706dbed3390330b983d