Summit 2011 Working Sessions/Protecting Against CSRF