CSRF Diagram (1/3)