Added XSRF check