Minor improvement to anti-csrf!