@dzucconi => Fix: add a CSRF check when linking an account.

See https://github.com/artsy/force/pull/1691 for details.

Tests are proving themselves a bit tedious ...
Probably just me being cray from oldschool js days, but this should be defined before it is used. (ie above line 35)