Fix XSS/CSRF vulneratiblity.
Releasing v140219