Tastypie SessionAuthentication support
Add CSRF into headers
Updating readme
Fixed Model's url generation if urlRoot is a function

Backbone 0.9.0 introduced a change to allow Model#urlRoot to be a
function or value – this fixes Model#url to work with both types.