Add CSRF support