Added CSRF (and ran Slamhound)