Fixed CSRF with new class