CSRF class proposal + example in comment block.