Prevent CSRF attacks on sign up