Use CSRF on all other location.

Signed-off-by: crynobone <crynobone@gmail.com>
Use timing safe string comparison in CSRF filter

Signed-off-by: crynobone <crynobone@gmail.com>
Include PUT request as well.

Signed-off-by: crynobone <crynobone@gmail.com>
Prepare for v2.1.13 release.

Signed-off-by: crynobone <crynobone@gmail.com>
Merge branch '2.1' into 2.2

Signed-off-by: crynobone <crynobone@gmail.com>

Conflicts:
	src/Foundation/Routing/UsersController.php