CSRF protection for Martini applications