Fixed the fix for csrf