Fix CSRFPolicy availability check in dnd-upload