Crsf protection test
Initial CSRF protection
Skip csrf plug when plug_skip_csrf_protection private is true
For Javascript GET requests, allow only XHR reqs
Merge pull request #136 from gjaldon/csrf-plug

CSRF plug