US966 - Fixing CSRF for preview.