CSRF attack prevention middleware (partial)