Change endpoint to something more meaningful
Add Csrf-Token header to request
Merge branch 'master' into wpf-update-card-csrf
Merge pull request #5610 from guardian/wpf-update-card-csrf

CSRF protection in card update