s3 swat: Add XSRF protection to shares page