Working on CSRF framework