WIP: Add CSRF token for write operations

#98
what kind of edge cases?