Fixes issue #539: Yii2 Csrf protection broken