CSRF has been addded, all bugs fixed except one with multipart form resolving
BROKEN COMMIT