Adding csrf protection