added CSRF protection support