Fixed csrf protection.