Protect against CSRF token fixation attacks
Update CHANGELOG