Added CSRF protection for rerequest links

Quick fix for #249.

This issue doesn't exist in 4.1.