Add CSRF Protection for object and batch actions