Adding CSRF check against POST transactions