CSRF whitelist supports regex

Signed-off-by: Casey Hancock <crh431@gmail.com>
Alter Pull #3176 to follow discussion
Alter Pull #3176 - CSRF Whitelist
Merge pull request #3176 from caseyh/develop

CSRF whitelist supports regex