Added CSRF filter to PUT & DELETE methods.  Fixes #42