Added CSFR Protect to controller.ext.php