Fix bug: request objects are bound to the request attributes
Fix CSR generation