ckeditor upload CSRF fix, amongst others