Detecting and Defending CSRF at API-Level | IEEE Conference Publication | IEEE Xplore