Adding csrf_protect option for routes