3.9.3 Web Attacks: Cross Site Request Forgery Exercise