Add CSRF Protection to Sessions (#26)