references finnlabs rack-protection till jsrf protection closes body
switches to https for rack-protection
Merge pull request #977 from opf/fix/json_csrf_protection_deadlock

references finnlabs rack-protection till jsrf protection closes body