Add CSRF checking.
Add rate limiting for bad passwords
Use pbkdf2 library for password hashing
Merge branch 'master' into csrf
Switch to sys.stdin for reading JSON input in update_setting
Merge pull request #99 from jsha/csrf

Add CSRF checking.