Included auth cookie to keep authorization until the timeout
Added anti forgery token validation on submit
Updated timeout