added automatic CSRF protection to the Route class