Using a random guid for the csrf token
Tweaked exploits