WIP: Add CSRF token for write operations

#98
```php
drupal_valid_token($request['__application']['csrf_token'], 'rest')
```
Lets get rid of the magic string `'rest'`, extract it somewhere (possibly in a constant) and document it.