csrf protection

csrf protection for developers
s/is/they are/ ?