Added CSRF crumb to actions requiring confirmation only when POST method is used.