Added CSRF filter. This WILL break some functionality