Adds basic CSRF injection