CSRF demo/task for team learning