Trying to figure out why CSRF is broken