Added CSRF check.