Updated CSRF extension to work with GET requests