Changed middleware for always sending csrf.