Add & check CSRF token (Lukas Reschke)

Bump version to 0.4.1