lol
Merge pull request #24 from Pomax/bug920954

CSRF fixes