Added count-per-day XSS
Added occasions CSRF