Changing the CSRF violation to be a basic bad request