WIP: Add CSRF token for write operations

#98
I've re-confirmed that this works:
```
curl https://example.com/api/v1/articles/1 \
  -H "X-Restful-Minor-Version: 1"
```