Added CSRF prevention.