Fix a nasty CSRF vulnerability. An attacker could be phishing account data by...

Fix a nasty CSRF vulnerability. An attacker could be phishing account data by spoofed URLs from our legit sender relay