Fix for #1 which is a csrf issue. Also corrected usage of requests