Make sure we have a csrf cookie