Secured appui and removed CSRF on main form