Base pages and CSRF protection.