add a method to get the csrf token