Added CSRF protection to Controller.