Bugfix for csrf exemption