It seems like getting csrf is the most common thing we'll need to do, and this makes it fast :-)