Does csrf verification better. Also changes constructor.