Got the posts working and the CSRF concern.