update docs and code to support latest respite with fixed CSRF handling
Merge pull request #1 from graingert/master

update docs and code to support latest respite with fixed CSRF handling