Add CSRF compliance