Add CSRF protection to /api/givecreddits