Bug fix: CSRF check was already in place, however was broken. (Now fixed)