Implement XSRF protection in the HTTP API
Add cyclone as a dependency