CSRF defense and get rid of published column