CSRF prevention through transient key validation