Small update

Added CSRF block, and tried to do the same with bruteforce..