inherit CsrfTokenController from the right base class