Include CSRF requirement