Maybe csrf token works now?