Update for WEB-69. Fix for JSONInjection lesson. Stub in javascript for CSRF lesson update/fix