Added some CSRF protection to operations