csrf_token fixes, RequestContext replaces Context