On the way to end-to-end encryption, also starting to use CSRF.