Add XSRF protection
Implement user signup