Altered CSRF whitelist matching to allow for simple, robust exclusions

Uses stripos to match a request URI to a whitelisted uri from position 0 following the base url. Allows for GET parameters and additional segments to follow a whitelisted URI, without requiring regex.