Fixed defence against CSRF attacks.