Restoring CSRF stuff