Security announcements

MSA-09-0022: Multiple CSRF problems fixed