XSRF protection on Account & TOTP pages