Fixed icon
Added missing CSRF check