implement Cross-Site Request Forgery issues and prevention