Missing CSRF middleware

[thirionlogan]

Describe the bug
Websites that rely on cookie-based authentication may be vulnerable to cross-site request forgery (CSRF). Specifically, a state-changing request should include a secret token so the request can't be forged by an attacker. Otherwise, unwanted requests can be submitted on behalf of a user who visits a malicious website.

** Recommendation **
Use a middleware package such as csurf to protect against CSRF attacks.

Additional context
Security Alert

• OWASP: Cross-Site Request Forgery (CSRF)
• Common Weakness Enumeration: CWE-352.