Fixes a bug in Auth bundle
Fixes a bug in Users bundle
Improves CSRF protection
Merge branch 'origin/master'