codeguy/Slim-Extras — pull request #69 by brianphillips (2013-04-29 11:31:17+00:00)
Title: look for CSRF token in HTTP headers as well as POST parameters

(re-submitted to different branch)

To make things easier for AJAX requests, it's best to allow the CSRF token to be specified as a custom header. This is the implementation of the feature request in issue #61.