Fixed the CSRF token on clientside