Fix bug: validate_csrf_token function

should use return True instead of return in validate_csrf_token function

this is order to perform right