Fixed CSRF token masking issue.