Wrap the csrf_token in "" instead of ''