Add csrf token and authentication