add xsrf example