you need to handle the fact that ``csrf_provider`` is an old provider, not a new TokenManager