Fixed CSRF vulnerability in controllers