Cross-site request forgery - Is CSRF dead? - Dominik Altermatt (2017)