Added cross-site request forgery checking.