Update ElfinderController.php

Add for CSRF if set true.
Merge pull request #26 from HenryDewa/patch-4

Update ElfinderController.php