Fixes the third-party CSRF exercise