@dzucconi => Fix: add a CSRF check when linking an account.

See https://github.com/artsy/force/pull/1691 for details.

Tests are proving themselves a bit tedious ...
Need help setting up a testing env? You need a bunch of prod / staging keys to get the tests to run.