Automatic CSRF protection for PHP applications