Joe, a web developer, wants to make sure his application is not susceptible to cross-site request forgery attacks. Which of the following is one way to prevent...