added "cloudinary folders" to locals
mirrored "folder" virtual from cloudinaryImage and enabled "cloudinary folders" option for form submissions
enabled "cloudinary folders" option for direct uploads
added docs for CloudinaryImages "folder" option
fixed typo
added support for CSRF in HTTP headers
added sinon for spying/stubbing during unit tests
updated security_test.js
added check for req.headers ... for unit testing with empty object
Merge pull request #615 from JohnnyEstilles/feature/cloudinaryimages-folders

Adding CloudinaryImages folders
Merge pull request #616 from JohnnyEstilles/feature/csrf-in-http-headers

Added support for CSRF in HTTP headers
Fixing noedit in initial field templates, fixes #625

Fields set to `noedit: true` are always editable in the initial form
when `initial: true`.
Cleanup
Supporting default value in the initial textarea form
Fixing previous value population in initial fields, fixes #622
Updating dependencies
CSS regen
Use mv module to rename files across devices
Updating changelog
v0.2.28