fix: address potential csrf vuln
fix: address potential csrf vuln

doubtfire-lms/doubtfire-api,jakerenzella/doubtfire-api,jakerenzella/doubtfire-api,doubtfire-lms/doubtfire-api,doubtfire-lms/doubtfire-api,jakerenzella/doubtfire-api,jakerenzella/doubtfire-api,doubtfire-lms/doubtfire-api,jakerenzella/doubtfire-api,doubtfire-lms/doubtfire-api,doubtfire-lms/doubtfire-api,jakerenzella/doubtfire-api,doubtfire-lms/doubtfire-api,jakerenzella/doubtfire-api