Add guard against CSRF.