7 Years Ago
Allow HEAD requests to bypass CSRF