Add csrf protection to post/delete/put requests
Add validation on models