CSRF supports HEAD method
Merge pull request #3064 from tsuyoshizawa/csrf-allow-head-method

CSRF check supports HEAD method