CSRF protection and SSL-only
Merge pull request #68 from YaleSTC/65_security

CSRF protection and SSL-only