Protect from CRSF and XSS attack