Fixed csrf token grabbing