Hotfix/enable csrf