added a CSRF mitigation class