* Added CSRF protection class -- not 100% perfect (can still XSS +
regular expression to bypass it... only 100% safe way is captchas)