Add CSRF support.