Please expand on this comment.  What changes to CSRF does mako require?  (This will become important for integrating into the interface).