Cross-Site Request Forgery is dead!