Added support for data-method and data-confirm.
Added Controller::enableCsrfValidation to support turning on/off CSRF validation for particular actions.