theforeman/foreman — pull request #1352 by domcleal (2014-04-03 17:01:22+00:00)
Title: fixes #4895 - Adds CSRF protection check to the API if a session user is present

Replaces #1331 with added tests (had to rework how we only applied this to session users)