Removed CSRF filters - they already run elsewhere
More gracefully handle TokenMismatchException errors