Improve CSRF protection Content-Type check (#1997)
Improve CSRF protection Content-Type check (#1997)

Previously the check would reject requests with a Content-Type header
that looked like the following:

Content-Type: application/json; charset=utf-8

Now we handle this situation correctly.
kingosticks/mopidy,jcass77/mopidy,jcass77/mopidy,mopidy/mopidy,kingosticks/mopidy,jcass77/mopidy,mopidy/mopidy,mopidy/mopidy,kingosticks/mopidy