Ignore CSRF if request supplies an API key
Merge pull request #39 from johnholdun/no-csrf-for-api

Ignore CSRF if request supplies an API key