MVP ready to test

src/app/(app)/create/page.tsx

@@ -11,11 +11,13 @@ import { Button } from '@/components/ui/Button';
 import { Badge } from '@/components/ui/Badge';
 import { calculateContrast } from '@/lib/utils';
 import { useTranslation } from '@/hooks/useTranslation';
+import { useCsrf } from '@/hooks/useCsrf';
 import { showToast } from '@/components/ui/Toast';
 
 export default function CreatePage() {
   const router = useRouter();
   const { t } = useTranslation();
+  const { fetchWithCsrf } = useCsrf();
   const [loading, setLoading] = useState(false);
   const [userPlan, setUserPlan] = useState<string>('FREE');
 
@@ -168,9 +170,8 @@ export default function CreatePage() {
 
       console.log('SENDING QR DATA:', qrData);
 
-      const response = await fetch('/api/qrs', {
+      const response = await fetchWithCsrf('/api/qrs', {
         method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify(qrData),
       });