CSRF protection and better flash messages