A8 – Cross Site Request Forgery – CSRF