Moved CSRF, added alerts on vulnerability found

also added pom.xml, but i'm new to this maven thing so I'm not sure it's
right. Also, the alerts may get annoying, so I'm not sure I'll keep
them.