Security fix: CSRF, Parameter manipulation
Merge pull request #1 from bis5/master

Security Update