Added CSRF protection

Cross-site request forgery protection