X-csrf-token
Merge pull request #235 from caiiiycuk/x-csrf-token

CSRF token can also come from request header