WIP Csrf plug

very rough