Shouldn't all forms have CSRF validation?
Shouldn't all forms have CSRF validation?