Add CSRF protection
Implement person suggestion when mergin account