Add support for XSRF on server side