Two php pages to demonstrate CSRF vulnerabilities and mitigation