A demo app that executes a CSRF attack.  The url and data can be replaced with a particular vulnerable app.