Federated Login CSRF - AppSecUSA 2017