Updating middleware to force inclusion of CSRF cookie in every response