Added CSRF protection (TESTING)