csrf error -> moved to error
Add api filter