Refactor code to use CSRF protection
Add CHANGELOG notes