a small project to demonstrate CSRF attacks