Cross-Site Request Forgeries Again, firewalls don't help.