Fix app declines, ensure they are not vulnerable to CSRF