fix: Add CSRF protection

src/web/Cargo.toml

@@ -35,6 +35,7 @@ tower-http.workspace = true
 serde.workspace = true
 memory-serve = "2.1.0"
 validator = { version = "0.20.0", features = ["derive"] }
+tower-sec-fetch = { version = "0.1.2", features = ["tracing"] }
 
 [build-dependencies]
 memory-serve = "2.1.0"