Added .editorconfig file

Here is more about it if you are not aware of it: http://editorconfig.org/
Add support to customize hidden tag.

Or some apps enabled CSP will be blocked because of the inline style.

Issue #149
Merge pull request #150 from tonyseek/support-customize-hidden-tag

Add support to customize hidden tag.
Merge pull request #148 from lipis/patch-3

Added .editorconfig file
Address issue #152 (stupidity prevention in docs)

See issue #152

Add a chunk to the documentation on CSRF protection to help stupid users like me avoid a stupid mistake
Fix bad formatting (markdown in RST)

In my last commit I committed broken formatting (Markdown in an RST document). This commit fixes that.
Merge pull request #155 from hangtwenty/master

Address issue #152 (stupidity prevention in CSRF docs)
Don't use floating point for expiration

On one of my machines, the return value of time.time() seem to have
different precision from other floats. This means that the value
generated by time.time() cannot be converted back to a float when
validating the CSRF signature. See example below. I also don't see why
we would need sub second precision here, so I just changed the
expiration value to be an int.

>>> t = time.time()
>>> t
1412343858.6668283
>>> float(t)
1412343858.6668283
>>> s = '%s' % t
'1412343858.6668283'
>>> float(s)
1412343858.6668286
>>> t2 = 1412343858.6668283
>>> t2
1412343858.6668286
Merge pull request #156 from oscarh/master

Don't use floating point for expiration
catch exceptions explicitly.

Do not handle errors we unexpected. The ValueError and ImportError are
foreseeable both.
Merge pull request #157 from tonyseek/catch-exceptions-explicitly

Catch exceptions explicitly.