Fixing CSRF issue by setting header