Adding CSRF support