implemented CSRF as a cross-cutting concern