adds CSRF support

adds CSRF support