Uncomment csrf protection