把token带到 http头部或者验证一下referer

提交地址：http://baozoumanhua.com/users/8311358提交数据： 195704664324Content-Disposition: form-data; name="utf8"a?? 195704664324Content-Disposition: form-data;