Fixes for CSRF and user management page