Add csrf token generation to auth