Coveralls syncthing/syncthing
Allow GET requests without CSRF