If the node server uses basic auth, do you need to add the CSRF token here?