It's worth having a link to http://en.wikipedia.org/wiki/Cross-site_request_forgery

Something to think about for your own applications