Plone4-csrffixes

------------------

- add a trailing slash on the site referrer matching
[vangheem]

------------------

- Handle TypeError caused by getToolByName on an
invalid context
[vangheem]

------------------

- add cssselect dependency for people who install lxml > 3
by mistake on Plone 4.0 and 4.1
[vangheem]

------------------

- prevent TypeError from occurring when checking commit of
non-string keys on an OOBTree instance. Fixes 5
[vangheem]

- Check to see if tinymce ajax is already patched or not.
This prevents JavaScript recursion error.
[awello, cekk]

------------------

- use a better guess at if we should rewrite urls
for zmi
[vangheem]

------------------

- correctly check for origin header
[vangheem]