tests: update configuration doctest.
csrf: add X-CSRFToken validation for XMLHttpRequests.
release: v0.12.0 (security update).