Fixed CSRF in Router