Update doorkeeper to prevent CSRF:

http://homakov.blogspot.co.uk/2014/12/blatant-csrf-in-doorkeeper-most-popular.html