CSRF, error checking, and a whole lotta love