Some changes

Added a feature in CSRF to check referee independent urls hy regular expressions
Removed some expressions from sql blocking list, because they are blocking REST Services