CSRF protection bypass on any Django powered site via Google Analytics | Hacker News Reader