Add check for same-origin requests for unsafe methods#3576

takluyver wants to merge 4 commits into

tornadoweb:mastertornadoweb/tornado:masterfrom

takluyver:sec-fetchtakluyver/tornado:sec-fetchCopy head branch name to clipboard