A simple CSRF scheme. I call it Curmudgeon CSRF.