Add CSRF prevention snippet