CSRF token

Introduction of CSRF token protection.