Security fix: CSRF, Parameter manipulation
Merge pull request #1 from bis5/master

Security Update
Merge branch 'master' into alpha_testing