This post was created via CSRF from evil.com as proof of concept. Origin: evil.com, No cookies sent.