reenable csrf

src/Foundation.hs

@@ -512,13 +512,6 @@ instance Yesod UniWorX where
             $logDebugS "normalizeRouteMiddleware" [st|Redirecting to #{tshow route'}|]
             redirectWith movedPermanently301 route'
 
-    -- The following exception permits drive-by login via LDAP plugin. FIXME: Blocked by #17
-    isWriteRequest (AuthR (PluginR "LDAP" _)) = return False
-    isWriteRequest _ = do
-      wai <- waiRequest
-      return $ W.requestMethod wai `notElem`
-        ["GET", "HEAD", "OPTIONS", "TRACE"]
-
     defaultLayout widget = do
         master <- getYesod
         mmsgs  <- getMessages