Add CSRF check

Conflicts:
	js/ServerFactory.js