Add CSRF param to calls