Added CSRF, X-site Scripting security