WIP: Add CSRF token for write operations

#98
nice catch, thanks.