temporary patch for sending csrf token