Added authentication support, CSRF bug exists