bug fix
CSRF Token now checked from engine's constructor
Merge branch 'master' of github.com:wvulibraries/engineAPI