Update doc comments
Add csrf form protection
Add Timer