Extend CSRF protection to file uploads