Fixed hard-coded NOP
Fixed hard-coded NOP
Modified for CSRF