ArcBees/GWTP — pull request #423 by Chris-V (2014-02-03 21:13:13+00:00)
Title: Allow specific unsecured REST calls when SecurityCookie is bound

`@NoXsrfHeader` can be used on resources or actions to prevent adding the XSRF header to the request when `@SecurityCookie` is bound.

Because the RPC-Dispatch already uses the abbr. XSRF, I also renamed mentions of X-CSRF in the REST-Dispatch. They mean the same things, this is just to avoid confusion.