Update CSRF protection for actions, fixes #439