Lied last commit, this should fix XSRF bug