Incuded an example of how to workaround the caveat

An example of how to use wrap-anti-forgery on a ring-app that has both site-routes and api-routes.