Added CSRF to bring in line with Nancy