Implement the flash.
Add CSRF protection