Add check for same-origin requests for unsafe methods#3576

takluyver wants to merge 2 commits intotornadoweb:mastertornadoweb/tornado:masterfrom

takluyver:sec-fetchtakluyver/tornado:sec-fetchCopy head branch name to clipboard