Added ability to specify default values for headers
Added support for validating anti forgery tokens in controllers in a manner that ties in with the proxy api implementation
Added exclusions to anti-forgery attribute