parse request body.
fix csrf token. angularjs csrf compatible.
add csrf example.