Merge pull request #679 from patriot1burke/master

CSRF
nolog CORS exception