Add CSRF protection
Start profile controller on client [WIP]