Change routes. Fix CSRF token skip.