Still working on client CSRF.
Implemented CSRF protection.