Added CSRF protection.