working but without csrf
security with csrf
Merge pull request #3 from mlewicki/security

Security