Added CSRF-token as requirement