Antiforgery should be useable without views
github.com