New aproach via bookmarklet to avoid CSRF