Using X-XSRF-TOKEN in HTTP header for user authentication.

This pull request resolves issue #11.