added CSRF protection classes