Add CSRF token to transfer ownership service