Added Controller::enableCsrfValidation to support turning on/off CSRF validation for particular actions.