All changes to the `handles()` and CSRF IMO should be reverted.