Added XSRF check to posts and comments