Changed way of preventing CSRF attacks