Fixed csrf in logout form