Add CSRF protection.
Split out gists functionality.