Better CSRF token handling (resembles laravel)