CSRF attack

Caught a potential CSRF attack