This middleware builds on top of rack-cors, using CORS rules to mitigate CSRF-attacks.
Ron Korving
MIT