Enabled CSRF protection again.