Completed tutorial_6 including CSRF fixes