Add CSRF (untested, as I currently can't build)

[marunjar]

@rnbwdsh @dvmarkusvogl not sure if untested code should be commited :( maybe someone else can confirm fix to be working before merge

[manujell73]

My changes should fix the issue. I got to test it on emulator and on my phone. It was a bit of a pain tbh