added support for xsrf token
version bump and release notes