Move CSRF check

jPlayer doesn't send our CSRF request token.