Fixed CSRF vulnerability.