This prevents CSRF-like attacks, when a web browser is used to access an ftp server. Reported by Maksymilian Arciemowicz <cxib@securityreason.com>. Fix mostly derived from OpenBSD, written by Moritz Jodeit <moritz@OpenBSD.org>