If there's a .new file, update that too
Use one random referer for a bunch of files
Use new multi-arg csrf install script on os x
Quote windows parameters correctly
Reuse existing csrf referer key