Readded CSRF protection

PLAT-1083 #time 1h