CSRF protection and SSL-only
Merge pull request #71 from YaleSTC/65_security

CSRF protection and SSL-only