Added CSRF protection to Thimble