Merge pull request #24 from joelcox/issue-165c

CSRF field for internal POST only. Issue #165