Add a basic csrf guard middleware