restws 7.x-1.1

Fixes a CSRF security issue. SA-CONTRIB-2012-162 - RESTful Web Services - Cross site request forgery (CSRF)

API change: The format extension in URL paths only works for GET requests now.
Example that still works:

GET http://example.com/node/123.json

Examples that do not work anymore:

POST http://example.com/node.json
PUT http://example.com/node/123.json
DELETE http://example.com/node/123.json

You have to set the content type header instead, example for JSON:

Content-Type: application/json