CSRF bonus labs