Added some hacks to help with the Owasp CSRF guard.

Need to make sure that I am not disabling CSRF protection!
Should factor out the hacky code into plugins.