Add protection for CSRF attacks