Add validation for CSRF token. Fix #1093
Add support for sec-jabbr-client header
Allow useragents containing signalr and also useragents which do not include (or populate) the useragent header without checkinng CSRF.  This should maintain compatability with most pre-existing clients.
Merge pull request #1126 from JabbR/fix-csrf-validation

Fix csrf validation