This is needed for IE < 8 because it doesn't send the CSRF token here. So that it is impossible to upload files. Fixes #110 and related to #122