CSRF protection & Guild promotion fix